Signal

Aave faces up to $230 million in losses after Kelp DAO bridge exploit triggers DeFi turmoil

Evidence first: scan the strongest sources, then decide whether to go deeper.

redditrsstelegram
crypto_assetsdefistablecoinsexchangeson_chain_datahacks
Trend in the last 24h
Current brief openSource links open
This current signal is open on the public brief with summary, metadata, source links, and full evidence. Pro adds compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.
3 top sources shown
rsETH Incident Report (April 20, 2026)
Aave Governance (Latest) · governance.aave.com · 2026-04-21 04:23 UTC
Overview

On April 18, 2026, the Kelp DAO ecosystem suffered a $293 million exploit via a forged cross-chain message on LayerZero's bridge, releasing 116,500 rsETH tokens that were used to borrow large amounts of WETH and wstETH on Aave.

Entities
AaveKelp DAOLayerZeroTron NetworkHTXrsETHUmbrellaaWETH Redemption Protocol
Score total
1.96
Momentum 24h
43
Posts
43
Origins
7
Source types
3
Duplicate ratio
77%
Why now
  • The exploit occurred recently on April 18, 2026, causing immediate large-scale losses and market reactions.
  • Ongoing governance discussions and emergency protocol measures are actively shaping the response.
  • Heightened scrutiny on bridge security models is influencing future DeFi infrastructure design.
Why it matters
  • Highlights critical vulnerabilities in DeFi cross-chain bridges and their systemic risk.
  • Demonstrates complex liability and risk allocation challenges among DeFi protocols and bridge operators.
  • Triggers coordinated protocol responses to protect users and maintain market stability.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
  • Aave faces between $124 million and $230 million in losses due to the Kelp DAO rsETH bridge exploit.
  • The Kelp DAO exploit exploited a single-validator weakness in LayerZero's cross-chain messaging system, releasing unbacked rsETH tokens.
  • Aave governance debates emphasize that losses should primarily be absorbed by Kelp DAO and LayerZero, not by Aave WETH depositors.
How sources frame it
  • Aave Governance: neutral
  • Aave Risk Manager: neutral
  • David Schwartz (Ripple CTO Emeritus): questioning
This narrative consolidates multiple governance reports, news articles, and community discussions to provide a comprehensive overview of the Kelp DAO bridge exploit and its impact on Aave and the broader DeFi ecosystem.
All evidence
All evidence
Aave risk manager models 2 bad debt scenarios from Kelp DAO exploit
Cointelegraph · cointelegraph.com · 2026-04-21 03:41 UTC
DeFi Protocols Launch Joint Escape Hatch for Aave ETH Lenders and Loopers
The Defiant · thedefiant.io · 2026-04-20 21:53 UTC
Aave Governance forum
governance.aave.com · governance.aave.com · 2026-04-21 01:12 UTC
rsETH Incident Report (April 20, 2026)
Aave Governance (Latest) · governance.aave.com · 2026-04-21 04:23 UTC
[Direct-to-AIP] Pause stkwaWETH Umbrella Staked Token on Ethereum V3
Aave Governance (Latest) · governance.aave.com · 2026-04-21 00:58 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 4Origin domains: 3Duplicates: -
Showing 5 / 0
Top publishers (this list)
  • Aave Governance (Latest) (2)
  • Cointelegraph (1)
  • The Defiant (1)
  • governance.aave.com (1)
Top origin domains (this list)
  • governance.aave.com (3)
  • cointelegraph.com (1)
  • thedefiant.io (1)